$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/caefe159-b60c-4d72-9342-6b935e1ff106.roa File: caefe159-b60c-4d72-9342-6b935e1ff106.roa (raw, json) Hash identifier: H1SL1HZ6w+7lV4f1JFgl5LldFxm6TarV5jfuXZHGXZc= Subject key identifier: 36:54:F1:25:A8:27:C6:21:56:31:43:10:56:A1:36:CB:29:20:DB:D7 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4173B82159771569D582A59C2728F629B465E106 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/caefe159-b60c-4d72-9342-6b935e1ff106.roa Signing time: Fri 13 Jun 2025 18:30:07 +0000 ROA not before: Fri 13 Jun 2025 18:30:07 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:f03f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:73:b8:21:59:77:15:69:d5:82:a5:9c:27:28:f6:29:b4:65:e1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 13 18:30:07 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=421de8673124138e85bbd89ea338679b90af4f013e0e62dbd217ca785fe1d6e7, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:1e:70:38:95:5d:e5:5e:dd:1c:40:f5:da: b9:85:30:0c:b2:8b:93:9b:e5:18:49:13:42:06:c7: ad:40:c0:b2:86:35:e4:21:8d:68:da:3f:e3:2a:68: 04:31:09:3d:74:85:cc:b7:6d:2e:11:94:72:91:c1: df:c4:ce:e9:5e:4f:d5:8a:02:3e:bb:40:d8:11:15: f0:83:1c:10:a0:e9:17:01:2b:f7:d7:d8:c9:11:fd: 93:45:f4:0a:57:3b:7a:46:b0:46:3b:35:63:08:0f: 48:21:67:b7:e6:dd:de:44:c7:2d:5e:18:7d:bd:c9: 9d:22:e1:d6:7e:ce:f2:96:ef:1f:ec:4f:bf:85:14: b8:c2:4b:27:1c:ba:3a:ee:d7:8d:da:83:1d:90:28: 68:83:f0:89:dd:ee:4f:f2:e9:bb:42:fc:43:2c:da: e9:53:66:b2:ab:32:09:0f:e4:f5:d2:62:2d:93:bf: e4:63:6f:4a:88:b9:9a:a8:30:19:45:27:da:64:2a: 80:f5:c9:5e:3e:74:f8:ad:05:e2:fe:65:20:c0:ce: 40:ea:68:8b:84:7d:c5:8c:a4:4c:ee:b5:33:88:da: 53:e7:5a:0a:28:3f:6c:c4:9e:b2:f6:be:55:c6:14: 1c:34:ab:3c:ec:c2:21:03:1f:ec:72:82:97:36:d1: b1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:54:F1:25:A8:27:C6:21:56:31:43:10:56:A1:36:CB:29:20:DB:D7 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/caefe159-b60c-4d72-9342-6b935e1ff106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03f::/48 Signature Algorithm: sha256WithRSAEncryption 65:0f:32:67:24:40:94:d0:32:97:b3:42:f1:32:43:69:da:2d: 82:03:9b:b3:2b:25:70:da:08:17:5f:1a:05:82:b0:56:d3:7f: 63:c5:50:7f:db:0e:2f:85:7e:17:54:08:33:79:91:a7:bd:85: 80:34:29:29:54:ae:cf:0e:56:59:cf:8a:0a:c8:7c:6d:ee:e7: 09:6b:91:4f:f7:88:0f:5e:31:69:87:a1:4e:ae:b0:13:cf:12: fc:1b:39:8e:ba:dd:75:33:92:ac:e5:b4:f2:cd:bb:03:ae:93: 04:f1:71:c5:4a:15:a1:ed:04:b9:cf:b7:18:b0:ab:32:af:14: 34:b1:54:74:f3:67:91:bc:2a:6f:0a:da:dd:7f:e0:a3:b0:cb: 3e:2b:e9:e9:5c:fe:73:98:1e:96:94:3c:19:7a:66:4e:0e:23: 5f:d8:fe:e7:8c:6a:58:62:a5:d1:4f:1b:16:99:e8:ab:4f:a6: 09:0b:43:9e:f0:70:b7:99:b5:00:bb:6b:71:88:f2:3f:58:30: 63:7f:0a:60:91:3a:a4:30:9d:7a:ac:64:70:39:c3:64:94:7f: 03:ab:73:c0:50:d4:3d:7e:ac:98:bd:2a:3b:ac:e6:c6:c8:3a: 62:46:13:36:4e:9c:5d:68:9f:c0:12:0b:5f:ae:54:80:c9:0a: 04:5c:c3:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQXO4IVl3FWnVgqWcJyj2KbRl4QYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjEzMTgzMDA3WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjFkZTg2NzMxMjQxMzhlODViYmQ4OWVhMzM4Njc5Yjkw YWY0ZjAxM2UwZTYyZGJkMjE3Y2E3ODVmZTFkNmU3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvTR5wOJVd5V7dHED12rmFMAyyi5Ob5RhJE0IGx61AwLKG NeQhjWjaP+MqaAQxCT10hcy3bS4RlHKRwd/EzuleT9WKAj67QNgRFfCDHBCg6RcB K/fX2MkR/ZNF9ApXO3pGsEY7NWMID0ghZ7fm3d5Exy1eGH29yZ0i4dZ+zvKW7x/s T7+FFLjCSyccujru143agx2QKGiD8Ind7k/y6btC/EMs2ulTZrKrMgkP5PXSYi2T v+Rjb0qIuZqoMBlFJ9pkKoD1yV4+dPitBeL+ZSDAzkDqaIuEfcWMpEzutTOI2lPn WgooP2zEnrL2vlXGFBw0qzzswiEDH+xygpc20bFDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNlTxJagnxiFWMUMQVqE2yykg29cwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2NhZWZlMTU5LWI2MGMtNGQ3Mi05MzQyLTZiOTM1ZTFmZjEwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8D8wDQYJKoZIhvcNAQELBQADggEBAGUPMmckQJTQMpezQvEyQ2na LYIDm7MrJXDaCBdfGgWCsFbTf2PFUH/bDi+FfhdUCDN5kae9hYA0KSlUrs8OVlnP igrIfG3u5wlrkU/3iA9eMWmHoU6usBPPEvwbOY663XUzkqzltPLNuwOukwTxccVK FaHtBLnPtxiwqzKvFDSxVHTzZ5G8Km8K2t1/4KOwyz4r6elc/nOYHpaUPBl6Zk4O I1/Y/ueMalhipdFPGxaZ6KtPpgkLQ57wcLeZtQC7a3GI8j9YMGN/CmCROqQwnXqs ZHA5w2SUfwOrc8BQ1D1+rJi9Kjus5sbIOmJGEzZOnF1on8ASC1+uVIDJCgRcw7Y= -----END CERTIFICATE-----Generated at Sun Jun 15 00:02:06 2025 by rpki-client